
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json)
Hash identifier: 8mkBJaIRnErxy5wKUMq6V10x5bDoXTlvJYAYA1ecTNA=
Subject key identifier: AB:B5:81:2B:B9:59:AD:90:D7:DC:E0:1D:E8:8F:73:14:83:66:BB:94
Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Certificate serial: 0B08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
Manifest number: 0AEC
Signing time: Mon 26 Oct 2026 19:23:31 +0000
Manifest this update: Mon 26 Oct 2026 19:23:31 +0000
Manifest next update: Mon 02 Nov 2026 19:23:31 +0000
Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: Zt9tdVgVLWLaB60snp429oEQb3teaEM8a6pCjL1zYI4=)
2: A6C9DA80974111F08BFA4E71C4F9AE02.roa (hash: ub4EJQqnSlf7Goi2AexBlDLgYVz7bOdibjQieFCvb3s=)
3: B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa (hash: 69MhSA35Y7+oCxeHTa4ZtgrfWQvl9S9VgT4gK56n3vE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 19:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2824 (0xb08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Validity
Not Before: Oct 26 19:23:31 2026 GMT
Not After : Nov 2 19:23:31 2026 GMT
Subject: CN=6adfa8b3-b433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:92:28:79:6c:4f:64:87:49:6c:7f:0c:32:
bc:57:46:9e:22:82:cc:5e:2d:d9:34:06:e7:17:0e:
9f:37:e5:96:de:2c:22:0a:76:4b:e1:95:47:f2:5c:
f1:ad:df:5c:58:92:8b:cd:31:c1:d1:7e:2a:98:20:
32:7b:07:72:5f:60:f8:75:b9:c5:8d:d8:14:fb:18:
56:be:30:e1:27:c2:c1:24:96:c6:a6:1d:87:22:58:
b2:50:00:18:ce:f0:ae:01:be:2c:4e:d9:58:f9:0f:
e1:19:36:2e:6c:ea:70:83:70:da:53:c7:09:27:97:
0e:f6:a1:00:8d:d8:ec:fa:ce:58:b7:9e:0e:1e:7f:
c1:5c:f9:53:b5:28:5b:29:c3:4b:3b:22:5c:eb:a1:
03:f4:1e:1a:ee:73:76:8c:4d:07:66:94:03:d5:f6:
d3:60:3f:7b:6a:7b:6f:6c:23:31:29:80:6c:07:f9:
15:f3:22:46:59:c3:ca:aa:6c:cf:57:c3:47:e9:16:
13:7e:12:92:0d:9a:34:04:a3:0b:a4:0b:b6:ed:d2:
b8:86:2f:1a:d5:ad:b1:22:62:98:ab:52:6f:30:e3:
0c:0d:e0:85:1b:ee:7e:db:6f:16:c3:ca:89:02:f2:
b0:42:0e:f5:a0:63:3b:72:22:db:8c:1d:db:bb:ec:
c2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B5:81:2B:B9:59:AD:90:D7:DC:E0:1D:E8:8F:73:14:83:66:BB:94
X509v3 Authority Key Identifier:
keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:36:19:30:70:30:d8:25:a2:35:84:15:91:6d:49:36:e1:d4:
98:9b:18:eb:b3:84:89:fe:bf:08:12:0c:5c:b3:25:43:8b:62:
27:67:90:6e:9f:47:97:93:06:23:73:1a:9c:aa:6c:ed:3b:2e:
0a:58:4b:21:cf:8a:4d:f4:29:87:6c:2b:58:30:51:31:58:9c:
7b:08:48:28:0d:69:75:13:6c:fe:1c:b4:9f:8c:54:9f:27:76:
e7:51:f5:31:3d:f3:f3:a8:f6:25:3b:5a:34:4f:31:df:e6:7f:
7a:7d:9e:38:1e:34:ab:01:3b:ed:a6:40:67:22:5c:7c:52:66:
6b:78:82:44:64:5c:0a:54:1a:25:7d:38:fc:28:04:61:92:72:
f4:61:09:02:cf:10:5e:3c:9d:1e:4a:41:5a:53:63:71:a9:81:
16:8c:63:6d:11:2c:b8:77:a9:69:a3:02:62:ab:62:69:b0:b7:
c6:93:69:e3:15:92:f0:96:30:6e:8a:ec:d7:5a:3e:b6:9e:da:
b4:06:73:81:69:b2:3b:b5:8a:9e:59:c0:d1:80:7d:0d:96:c0:
51:e6:55:20:0e:1b:5b:ad:ed:e6:79:31:ca:00:de:c3:81:3b:
de:7b:08:95:3e:5e:f4:7f:08:64:03:80:94:1b:84:97:e8:cf:
7c:e9:7c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:14:52 2026 by rpki-client